Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-12 03:29:4025-08-12 03:29:4500:00:050 → 5
Maintaining25-08-12 03:29:4525-08-12 03:34:4600:05:015
Decreasing25-08-12 03:34:4625-08-12 03:34:4600:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 90 (+20) 0 11.61 (+0.50) 3 (0) 66 (-1) 0.30 (+0.07) 0.00 (+0.00)
GET get_analysis_latest_cpe 90 (+20) 0 100.56 (-23.96) 32 (0) 207 (-175) 0.30 (+0.07) 0.00 (+0.00)
GET get_analysis_status 90 (+20) 0 3.57 (-3.03) 1 (0) 54 (-1) 0.30 (+0.07) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 90 (+20) 0 883.54 (+1.50) 218 (-33) 1886 (-239) 0.30 (+0.07) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 90 (+20) 0 818.31 (-32.65) 496 (+133) 1187 (-29) 0.30 (+0.07) 0.00 (+0.00)
GET list_advisory 90 (+20) 0 429.54 (-42.73) 144 (-46) 747 (-48) 0.30 (+0.07) 0.00 (+0.00)
GET list_advisory_paginated 90 (+20) 0 406.21 (+6.95) 132 (+12) 1806 (+1232) 0.30 (+0.07) 0.00 (+0.00)
GET list_importer 90 (+20) 0 5.38 (+3.22) 1 (0) 51 (+45) 0.30 (+0.07) 0.00 (+0.00)
GET list_organizations 90 (+20) 0 9.59 (+3.00) 1 (0) 55 (+9) 0.30 (+0.07) 0.00 (+0.00)
GET list_packages 90 (+20) 0 382.89 (-97.67) 101 (-272) 884 (+43) 0.30 (+0.07) 0.00 (+0.00)
GET list_packages_paginated 90 (+20) 0 341.44 (-77.97) 104 (-10) 636 (+55) 0.30 (+0.07) 0.00 (+0.00)
GET list_products 95 (+25) 0 5.98 (-3.64) 4 (0) 11 (-36) 0.32 (+0.08) 0.00 (+0.00)
GET list_sboms 95 (+25) 0 1251.44 (-47.96) 519 (-182) 1776 (-314) 0.32 (+0.08) 0.00 (+0.00)
GET list_sboms_paginated 90 (+20) 0 1584.46 (-55.03) 416 (-167) 3605 (+120) 0.30 (+0.07) 0.00 (+0.00)
GET list_vulnerabilities 90 (+20) 0 223.86 (-143.07) 56 (-47) 404 (-72) 0.30 (+0.07) 0.00 (+0.00)
GET list_vulnerabilities_paginated 90 (+20) 0 178.98 (-18.68) 53 (-95) 295 (+50) 0.30 (+0.07) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 90 (+20) 0 67.12 (+5.05) 10 (-1) 187 (-4) 0.30 (+0.07) 0.00 (+0.00)
GET search_advisory 90 (+20) 0 1045.60 (+123.34) 170 (-43) 2334 (+144) 0.30 (+0.07) 0.00 (+0.00)
GET search_exact_purl 95 (+25) 0 33.64 (+22.76) 3 (+1) 42 (-11) 0.32 (+0.08) 0.00 (+0.00)
GET search_purls 95 (+20) 0 7900.52 (-4684.22) 4217 (-3468) 10165 (-9944) 0.32 (+0.07) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 90 (+20) 0 621.18 (+59.93) 278 (+5) 1295 (+350) 0.30 (+0.07) 0.00 (+0.00)
Aggregated 1910 (+435) 0 792.38 (-261.59) 1 (0) 10165 (-9944) 6.37 (+1.45) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (0) 8 (-1) 12 (-1) 34 (+11) 52 (+9) 54 (-5) 66 (-1)
GET get_analysis_latest_cpe 93 (-17) 100 (-20) 110 (-40) 120 (-40) 170 (-40) 180 (-40) 200 (-80) 207 (-173)
GET get_analysis_status 2 (-1) 2 (-1) 3 (-1) 3 (-2) 6 (-2) 6 (-43) 46 (-5) 54 (-1)
GET get_sbom[sha256:720e4451…a939656247164447] 700 (0) 800 (-100) 1,000 (0) 1,000 (0) 1,886 (-114) 1,886 (-114) 1,886 (-114) 1,886 (-114)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (-100) 900 (0) 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 420 (-50) 440 (-60) 460 (-40) 480 (-120) 600 (0) 600 (-100) 700 (-95) 700 (-95)
GET list_advisory_paginated 400 (-30) 410 (-40) 420 (-40) 460 (-20) 480 (-10) 500 (0) 600 (+26) 1,806 (+1,232)
GET list_importer 2 (0) 2 (0) 3 (+1) 4 (+1) 7 (+4) 45 (+41) 51 (+47) 51 (+45)
GET list_organizations 4 (+1) 4 (0) 6 (0) 12 (+4) 31 (+18) 45 (+18) 52 (+9) 55 (+9)
GET list_packages 390 (-50) 400 (-50) 420 (-30) 470 (-30) 500 (-100) 600 (-200) 800 (0) 884 (+84)
GET list_packages_paginated 330 (-90) 380 (-80) 390 (-90) 410 (-80) 480 (-20) 500 (-81) 500 (-81) 600 (+19)
GET list_products 5 (-2) 6 (-2) 7 (-2) 8 (-3) 9 (-4) 9 (-34) 10 (-36) 11 (-36)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 1,776 (-224) 1,776 (-224) 1,776 (-224) 1,776 (-224)
GET list_sboms_paginated 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (-1,000) 3,000 (0) 3,000 (0) 3,605 (+605)
GET list_vulnerabilities 220 (-160) 230 (-160) 250 (-150) 270 (-160) 290 (-150) 310 (-150) 390 (-80) 400 (-76)
GET list_vulnerabilities_paginated 190 (-10) 190 (-20) 200 (-20) 210 (-10) 240 (+10) 270 (+30) 280 (+40) 295 (+50)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 66 (+13) 75 (+8) 85 (+5) 100 (+5) 130 (+10) 170 (0) 180 (0) 187 (-3)
GET search_advisory 800 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 38 (+31) 39 (+31) 39 (+31) 39 (+30) 40 (+28) 41 (-6) 41 (-7) 42 (-11)
GET search_purls 8,000 (-3,000) 8,000 (-3,000) 9,000 (-9,000) 9,000 (-10,000) 9,000 (-11,000) 10,000 (-10,000) 10,000 (-10,000) 10,000 (-10,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 600 (0) 700 (+100) 700 (0) 800 (0) 900 (+100) 1,000 (+200) 1,000 (+100)
Aggregated 290 (-90) 410 (-40) 600 (0) 900 (+100) 2,000 (0) 4,000 (-4,000) 9,000 (-10,000) 10,000 (-10,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 90 [200]
GET get_analysis_latest_cpe 90 [200]
GET get_analysis_status 90 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 90 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 90 [200]
GET list_advisory 90 [200]
GET list_advisory_paginated 90 [200]
GET list_importer 90 [200]
GET list_organizations 90 [200]
GET list_packages 90 [200]
GET list_packages_paginated 90 [200]
GET list_products 95 [200]
GET list_sboms 95 [200]
GET list_sboms_paginated 90 [200]
GET list_vulnerabilities 90 [200]
GET list_vulnerabilities_paginated 90 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 90 [200]
GET search_advisory 90 [200]
GET search_exact_purl 95 [200]
GET search_purls 95 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 90 [200]
Aggregated 1,910 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 90 (+20) 0 (0) 14.06 (-0.23) 7 (-3) 27 (+1) 0.30 (+0.07) 0.00 (+0.00)
1.1 list_organizations 90 (+20) 0 (0) 9.80 (+2.97) 1 (0) 55 (+9) 0.30 (+0.07) 0.00 (+0.00)
1.2 list_advisory 90 (+20) 0 (0) 429.58 (-42.75) 144 (-46) 747 (-48) 0.30 (+0.07) 0.00 (+0.00)
1.3 list_advisory_paginated 90 (+20) 0 (0) 406.24 (+6.92) 132 (+12) 1806 (+1232) 0.30 (+0.07) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 90 (+20) 0 (0) 11.68 (+0.53) 3 (0) 66 (-1) 0.30 (+0.07) 0.00 (+0.00)
1.5 search_advisory 90 (+20) 0 (0) 1045.64 (+123.32) 170 (-43) 2335 (+145) 0.30 (+0.07) 0.00 (+0.00)
1.6 list_vulnerabilities 90 (+20) 0 (0) 223.91 (-143.05) 56 (-47) 404 (-72) 0.30 (+0.07) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 90 (+20) 0 (0) 179.04 (-18.63) 53 (-95) 295 (+50) 0.30 (+0.07) 0.00 (+0.00)
1.8 list_importer 90 (+20) 0 (0) 5.39 (+3.23) 2 (+1) 51 (+45) 0.30 (+0.07) 0.00 (+0.00)
1.9 list_packages 90 (+20) 0 (0) 382.92 (-97.68) 101 (-272) 884 (+43) 0.30 (+0.07) 0.00 (+0.00)
1.10 list_packages_paginated 90 (+20) 0 (0) 341.53 (-77.91) 104 (-10) 636 (+55) 0.30 (+0.07) 0.00 (+0.00)
1.11 search_purls 95 (+20) 0 (0) 7900.56 (-4684.20) 4217 (-3468) 10165 (-9944) 0.32 (+0.07) 0.00 (+0.00)
1.12 search_exact_purl 95 (+25) 0 (0) 33.67 (+22.76) 3 (+1) 42 (-11) 0.32 (+0.08) 0.00 (+0.00)
1.13 list_products 95 (+25) 0 (0) 6.01 (-3.66) 4 (0) 11 (-36) 0.32 (+0.08) 0.00 (+0.00)
1.14 list_sboms 95 (+25) 0 (0) 1251.48 (-47.96) 519 (-182) 1776 (-314) 0.32 (+0.08) 0.00 (+0.00)
1.15 list_sboms_paginated 90 (+20) 0 (0) 1584.50 (-55.09) 416 (-167) 3605 (+120) 0.30 (+0.07) 0.00 (+0.00)
1.16 get_analysis_status 90 (+20) 0 (0) 3.66 (-3.03) 1 (0) 54 (-2) 0.30 (+0.07) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 90 (+20) 0 (0) 100.59 (-24.03) 32 (0) 207 (-175) 0.30 (+0.07) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 90 (+20) 0 (0) 883.61 (+1.50) 218 (-33) 1886 (-239) 0.30 (+0.07) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 90 (+20) 0 (0) 67.24 (+5.12) 10 (-1) 190 (-1) 0.30 (+0.07) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 90 (+20) 0 (0) 818.37 (-32.66) 496 (+133) 1187 (-29) 0.30 (+0.07) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 90 (+20) 0 (0) 621.26 (+59.90) 278 (+5) 1295 (+350) 0.30 (+0.07) 0.00 (+0.00)
Aggregated 2,000 (+455) 0 (0) 756.72 (-249.49) 1 (0) 10165 (-9944) 6.67 (+1.52) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 90 (+20) 16171.72 (-5255.52) 7921 (-8421) 20574 (-10123) 0.30 (+0.07) 18.00 (+4.00)
Aggregated 5 (0) 90 (+20) 16171.72 (-5255.52) 7921 (-8421) 20574 (-10123) 0.30 (+0.07) 18.00 (+4.00)

User Metrics